AI synthesis Hackers are actively exploiting a macOS Screen Sharing authentication bypass (CVE-2026-65400) to gain root access and deploy Monero miners on Macs with port 5900 exposed, according to the Dutch NCSC.
What changed
Every report remains linked to its original publisher.
The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]
Hackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online. The Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CV...